Staredit Network

Staredit Network -> Computers and Technical -> CPU
Report, edit, etc...Posted by Pyro-Fire on 2007-01-17 at 23:16:16
my cpu % is always above 50% whenever the LAN is enabled, and i dont mean that as in the cords are plugged in or not, i mean i gotta go to the network connections and enable it.

anyone got a solution?

note: do NOT say its a virus/trojan or anything else, i have used 2 firewalls without picking anything up.

also, do NOT tell me to go to task manager and check which programs are using the cpu. dont you think i would have done that about a month ago when this all started?

also, i have been to microsoft, but those dicks over there wont help me.
Report, edit, etc...Posted by Deathawk on 2007-01-18 at 07:10:24
Use Hijackthis and post the results here..?
Report, edit, etc...Posted by Pyro-Fire on 2007-01-19 at 02:09:33
CODE

Logfile of HijackThis v1.99.1
Scan saved at 4:09:10 PM, on 19/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\xampp\apache\bin\apache.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\xampp\mysql\bin\mysqld-nt.exe
C:\Program Files\Network Monitor\netmon.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\Fast.exe
C:\Program Files\xampp\apache\bin\apache.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\ACCESS~2\ala.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\YPOPz\YPOPs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SmartFTP Client 2.0\SmartFTP.exe
C:\Documents and Settings\user1\Local Settings\Temp\_AZTMP10_\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.getacoder.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=
F3 - REG:win.ini: load=C:\PROGRA~1\ACCESS~2\ala.exe, C:\PROGRA~1\ACCESS~2\ala.exe
O1 - Hosts: 63.161.183.91 bnls.valhallalegends.com
O3 - Toolbar: Protection Bar - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - blank (file missing)
O4 - HKLM\..\Run: [ala.exe] c:\progra~1\access~2\ala.exe
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: WinMySQLadmin.lnk = C:\Program Files\xampp\mysql\bin\winmysqladmin.exe
O4 - Startup: YPOPs.lnk = ?
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\user1\Start Menu\Programs\IMVU\Run IMVU.lnk
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Flash Decompiler SWF Capture tool - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\PROGRA~1\ELTIMA~1\FLASHD~1\iebt.dll (HKCU)
O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\PROGRA~1\ELTIMA~1\FLASHD~1\iebt.dll (HKCU)
O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://www.sis.com/ocis/OSInfo.cab
O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://www.sis.com/ocis/SiSAutodetectNT.cab
O16 - DPF: {799BB2EC-572A-42A9-84AD-112806F4F551} (Imweb Control) - http://activexdown.paran.com/paranactivex/data/imweb.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: cfgmngr32 - C:\WINDOWS\
O20 - Winlogon Notify: DIFx - C:\WINDOWS\
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: Themes - C:\WINDOWS\
O20 - Winlogon Notify: Uninstall - C:\WINDOWS\
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\Program Files\xampp\apache\bin\apache.exe" -k runservice (file missing)
O23 - Service: Remote Control Pro (ARCServer) - Unknown owner - C:\Program Files\Remote Control Pro\RCPServer.exe (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\dXNlcg\command.exe (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\xampp\filezillaftp\filezillaserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: mysql - Unknown owner - C:\Program Files\xampp\mysql\bin\mysqld-nt.exe" "--defaults-file=C:\Program Files\xampp\mysql\bin\my.cnf" mysql (file missing)
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe" /service (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Unknown owner - C:\Program Files\Sygate\SPF\smc.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ulib.exe - Unknown owner - C:\WINDOWS\system32\ulib.exe (file missing)
Report, edit, etc...Posted by Deathawk on 2007-01-19 at 14:52:30
I can't really find anything wrong with that with a quick look through of it... but then again I don't do much analyzing of HJT logs.

You have two firewall's running..? Are they both software... if so.. shut one off.


Report, edit, etc...Posted by Felagund on 2007-01-19 at 16:42:24
If you have more than one network connection enabled, disable the ones you aren't using.

Other than that, turn off Windows Firewall if you're using another firewall - I've noticed that two firewalls on concurrently can cause some hefty connection issues. Heck, even having McAfee and my hardware firewall in the router enabled at once gave me connection issues, so I disabled the router firewall.

Tell us if disabling the network connections reduces your CPU usage notably (more than 1 or 2 percent).
Report, edit, etc...Posted by Pyro-Fire on 2007-01-21 at 13:40:11
disabling the network connection lets my cpu run at 0%, instead of 50%. (which is what i want when it is enabled)
Report, edit, etc...Posted by xenomat on 2007-01-22 at 08:32:39
And when your Network Connection is activated, which process is using the 50%?

Is the Hijackthis Log taken in your normal running environment? There is so much stuff running... I got 12 processes. But i think thats just because i'm a clean-system-fanatic. happy.gif
Report, edit, etc...Posted by Felagund on 2007-01-22 at 11:22:23
Ha ha, I'm running 66 processes myself, most of which I probably don't need but don't care about because this thing has never lagged. tongue.gif
Report, edit, etc...Posted by xenomat on 2007-01-22 at 12:16:54
That would give me constant heart attacks. blink.gif

And after that, more heart attacks. Followed by a heart attack.
Report, edit, etc...Posted by ShadowFlare on 2007-01-23 at 02:32:50
Haha, I currently have 47 processes running, plus another copy of Windows XP running in a virtual machine (which is running 33 processes itself as well), and another virtual machine running Debian Linux with some number of processes in it that I do not know. happy.gif

Basically... 80+ processes. lol (probably more like 100+)
Report, edit, etc...Posted by Felagund on 2007-01-23 at 22:16:06
But Windows XP and Linux aren't system hogs like running Company of Heroes and Call of Duty 2 at the same time. Adding Oblivion onto there and playing all three at the same time (not just in menus and stuff but actually playing) started to give me serious lag. All of those games hit 500mb of Ram usage automatically, and Oblivion and CoH have hit as high as 1200mb apiece.
Report, edit, etc...Posted by ShadowFlare on 2007-01-23 at 23:10:43
Heh, I wasn't really talking about things like that anyway. I was just saying that I have a lot of things I usually leave running on here. smile.gif I'd like to have more like what you have, though, as far as cpu features/speed and memory amount. happy.gif

Mine is a socket 939 single-core Athlon 64 3200+ (2.0 GHz) and I have 1 GB (2x512 MB) of memory. I'm considering soon upgrading to a socket AM2 board with a dual core cpu (possibly still a 2.0 GHz one) and 2 GB of memory. Of course, because of what I have I will need to replace all 3 of those components (because I specifically want socket AM2 for a certain CPU feature I would use a lot).

I probably won't be upgrading the video card anytime soon, though, since I'm completely satisfied with what I have (for now); partly since I don't buy PC games very often. Also, the card I have is good enough to play every game I currently have at the absolute highest settings on the highest resolution my current monitor supports. It is a 16 pixel pipeline unlocked Radeon X800 GTO^2 -- basically equivalent to an X800 XL at stock clocks, but it has the same GPU as the X850 cards and mine works perfectly stable at X850 XT Platinum Edition settings. I don't use those settings typically, though, as I don't have any games that the default clock speed can't handle at max detail settings.
Report, edit, etc...Posted by Pyro-Fire on 2007-01-24 at 05:14:14
QUOTE(xenomat @ Jan 22 2007, 08:32 AM)
And when your Network Connection is activated, which process is using the 50%?

QUOTE
also, do NOT tell me to go to task manager and check which programs are using the cpu. dont you think i would have done that about a month ago when this all started?
Report, edit, etc...Posted by Deathawk on 2007-01-24 at 14:33:09
QUOTE(ShadowFlare @ Jan 24 2007, 12:10 AM)
Heh, I wasn't really talking about things like that anyway.  I was just saying that I have a lot of things I usually leave running on here. smile.gif  I'd like to have more like what you have, though, as far as cpu features/speed and memory amount. happy.gif

Mine is a socket 939 single-core Athlon 64 3200+ (2.0 GHz) and I have 1 GB (2x512 MB) of memory.  I'm considering soon upgrading to a socket AM2 board with a dual core cpu (possibly still a 2.0 GHz one) and 2 GB of memory.  Of course, because of what I have I will need to replace all 3 of those components (because I specifically want socket AM2 for a certain CPU feature I would use a lot).

I probably won't be upgrading the video card anytime soon, though, since I'm completely satisfied with what I have (for now); partly since I don't buy PC games very often.  Also, the card I have is good enough to play every game I currently have at the absolute highest settings on the highest resolution my current monitor supports.  It is a 16 pixel pipeline unlocked Radeon X800 GTO^2 -- basically equivalent to an X800 XL at stock clocks, but it has the same GPU as the X850 cards and mine works perfectly stable at X850 XT Platinum Edition settings.  I don't use those settings typically, though, as I don't have any games that the default clock speed can't handle at max detail settings.
[right][snapback]617650[/snapback][/right]

Faster is better, though.. tongue.gif And I'm pretty sure the x800gto2 only has a single slot cooler... so it does probably run warmer than the x850xtpe which uses a dual slot cooler...
Report, edit, etc...Posted by ShadowFlare on 2007-01-24 at 17:32:39
QUOTE(Deathawk @ Jan 24 2007, 01:33 PM)
Faster is better, though.. tongue.gif And I'm pretty sure the x800gto2 only has a single slot cooler... so it does probably run warmer than the x850xtpe which uses a dual slot cooler...
[right][snapback]617818[/snapback][/right]

Oh, I've switched out the cooler for something else that would keep it cooler, so no problem there. smile.gif It barely breaks 70 C after extended use at X850XTPE settings, and I've heard of actual X850XTPE cards exceeding 80 C.

BTW, at those settings, 3d benchmark results are identical to systems with the same CPU type/speed as mine, the same amount of memory, and an actual X850XTPE card.


Pyro-Fire:

Is your network connection one built-in on the motherboard, or is it a separate card? Hmm, either way, do you have a spare network card you could try using in the computer to see if the result is the same? Also, is your network connection using drivers that came with Windows or ones directly from the maker of the card? If they are ones from the maker of the card, are they the most up-to-date ones?
Report, edit, etc...Posted by Pyro-Fire on 2007-01-24 at 20:16:36
QUOTE(ShadowFlare @ Jan 24 2007, 05:32 PM)
Is your network connection one built-in on the motherboard, or is it a separate card?  Hmm, either way, do you have a spare network card you could try using in the computer to see if the result is the same?  Also, is your network connection using drivers that came with Windows or ones directly from the maker of the card?  If they are ones from the maker of the card, are they the most up-to-date ones?
[right][snapback]617922[/snapback][/right]

both. and yes i have tried it.

what i havent tried is uninstalling them both then re-installing.. ill do that later tonight.

Report, edit, etc...Posted by Felagund on 2007-01-24 at 21:07:02
If you have both an onboard network interface and a PCI card, why don't you try both of those? Also, if the onboard is giving you trouble, disable it in the BIOS. That's what you do for onboard video/audio when you get dedicated video/sound cards. Maybe you have to with network cards as well.
Report, edit, etc...Posted by Pyro-Fire on 2007-01-26 at 11:25:25
the second card is very old... so ill try re-installing the cards if that dont work ill try your way of doing it smile.gif

ADDITION:
i switched over to my second network card and now it only runs at a minimum of about 35% =D!

if someone knows how to get the last 30% back, i'd love to hear it =)
ADDITION:
awww freak... it lowers my max net speed to less then dialup

edit:
oh nvm just the mirror of this program..

Edit:

I HAVE DISCOVERED WHAT IT IS! now i just need to know how to fix it!!

its apparently "hardware interrupts" -- according to microsoft's process explorer.

solution : get a new network card?
Next Page (1)